[NEWS] Mac OS X Malicious Bundles
SecuriTeam <[email protected]>
| Newsgroups | gmane.comp.security.securiteam |
|---|---|
| Message-ID | <[email protected]> |
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source. http://www.securiteam.com/mailinglist.html - - - - - - - - - Mac OS X Malicious Bundles ------------------------------------------------------------------------ SUMMARY One of the features in Mac OS X is the ability to load bundle code into arbitrary applications using the InputManagers directory. Basically, any bundle that is loaded into the InputManagers directory in a user's Library directory (or the root Library directory) will be loaded into every application that the user opens. DETAILS The InputManagers directory on OS X gives the user the ability to load any bundle into any application. The Objective-C runtime environment gives code the ability to dynamically change the mapping of any function at runtime. The combination of these two allows a bundle to modify the behavior of any application launched by a user. This fact is nothing new -- people have been discussing this for a while, and other people have been using this functionality to write neat software that modifies other software. ADDITIONAL INFORMATION The information has been provided by <mailto:[email protected]> Braden Thomas. The original article can be found at: <http://braden.machacking.net/bundle.html> http://braden.machacking.net/bundle.html ======================================== This bulletin is sent to members of the SecuriTeam mailing list. To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] In order to subscribe to the mailing list, simply forward this email to: [email protected] ==================== ==================== DISCLAIMER: The information in this bulletin is provided "AS IS" without warranty of any kind. In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.